Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/RSsMaCl57szGFCkhCpSEu-SYKeY.roa
File: RSsMaCl57szGFCkhCpSEu-SYKeY.roa (raw, json)
Hash identifier: oRvnshX7DCElI5ZaHCvWWYGxI4E7w9fzHzlAFCyFjaQ=
Subject key identifier: 45:2B:0C:68:29:79:EE:CC:C6:14:29:21:0A:94:84:BB:E4:98:29:E6
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019426D98C41745AA4FE77549BA2D27EB7DE
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/RSsMaCl57szGFCkhCpSEu-SYKeY.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51180
IP address blocks: 91.241.96.0/20 maxlen: 21
91.241.112.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:41:74:5a:a4:fe:77:54:9b:a2:d2:7e:b7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=452b0c682979eeccc61429210a9484bbe49829e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0d:a8:d9:26:fa:4a:8a:51:d1:1d:3a:a3:a8:
c1:93:c8:83:c4:e9:8b:27:c0:7f:8f:a7:2e:f7:e7:
fc:6b:4d:27:8f:b7:20:d5:bd:ef:2c:fc:da:d0:20:
1d:93:01:ac:2d:0a:74:28:5e:09:d0:05:54:f3:84:
f8:d2:89:c9:6e:07:a2:93:35:51:80:71:0b:3d:30:
49:51:cd:af:40:f4:55:d1:d6:3b:a7:62:6b:66:7f:
f5:88:f2:ef:32:cd:1e:67:6f:c7:dd:c0:fd:bd:8f:
67:27:68:f8:ed:cf:e2:a6:98:0b:9c:54:af:f0:7b:
a4:9d:c8:60:39:81:25:29:36:d4:11:fc:d7:cd:d4:
97:88:c4:42:d1:f8:74:d1:e9:40:5c:f5:1d:6f:51:
3e:41:8c:1a:de:5a:1d:4e:57:e8:b7:89:9d:2c:38:
fc:02:3e:11:be:69:cd:b6:30:1b:fc:ea:50:5d:a0:
a3:30:38:f4:a0:4d:b7:04:2d:b8:fc:7d:6f:36:6b:
f6:54:c4:fa:de:6f:5b:2f:f7:7e:7a:b5:55:ed:d8:
34:c6:35:14:f8:c0:b7:4d:c2:21:b4:df:16:b4:d6:
37:9d:4c:c0:98:c6:73:47:c5:9b:ea:1d:59:38:20:
8a:e9:3e:80:8c:ca:d6:bc:b0:89:3c:93:45:e6:da:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:0C:68:29:79:EE:CC:C6:14:29:21:0A:94:84:BB:E4:98:29:E6
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/RSsMaCl57szGFCkhCpSEu-SYKeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.96.0-91.241.119.255
Signature Algorithm: sha256WithRSAEncryption
48:bc:27:f9:1b:db:d9:4b:a4:9f:de:b9:85:5d:9f:49:ec:6f:
df:cf:34:92:0b:14:50:6f:2c:4c:89:a9:c6:81:a6:b4:d3:10:
09:92:0e:50:2b:bb:cf:2d:e2:d5:86:ba:e2:f5:16:12:c3:1f:
36:cf:98:9e:ec:93:5d:7a:46:a9:9c:82:d3:58:0c:90:ff:63:
d1:b6:d3:66:14:4c:64:b4:a9:98:03:ad:a3:f6:82:c1:56:b4:
0b:1f:e9:b6:f2:42:ba:63:f8:7b:76:59:0c:13:93:0b:18:ad:
41:46:e0:8b:2a:41:1f:1f:d8:db:c4:98:bd:29:6c:ce:24:17:
71:ae:e7:13:ad:cc:d5:29:68:55:d3:8d:be:02:12:dc:40:b1:
b9:b2:8f:48:5d:e3:64:a5:51:8e:b0:3f:79:76:11:29:e1:66:
09:73:df:5e:6b:0a:84:4e:45:1c:0c:d5:24:44:1e:6f:ac:e6:
ee:61:52:16:96:fc:c7:fe:c9:d6:38:f1:1b:cf:be:51:bf:cc:
ee:4a:35:fd:d3:02:e6:20:c8:26:05:89:ff:d4:7d:01:ce:d6:
78:83:1b:b8:5f:f2:7d:84:9d:31:47:5c:1e:3a:d1:3b:9b:88:
df:a3:ef:eb:45:9d:ea:46:ec:04:a4:c8:71:aa:30:9f:37:10:
35:fd:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:49 2025 by rpki-client